whale-code 6.5.5 → 6.5.6

package/dist/server/lib/template-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-resolver.js","names":["TEMPLATE_REGEX","BLOCKED_PROPS","Set","walkPath","value","parts","startIndex","current","i","length","undefined","has","resolveExpression","expr","ctx","trimmed","trim","Date","toISOString","slice","now","split","root","stepKey","stepData","steps","trigger","input","workflow","run","env","ALLOWED_ENV_KEYS","resolveString","template","singleMatch","match","resolved","replace","JSON","stringify","String","resolveTemplate","depth","Array","isArray","map","item","k","v","Object","entries","evaluateCondition","expression","includes","val","isNegated","startsWith","exists","operatorPatterns","quoteRegions","quoteRe","qm","exec","push","index","pattern","op","globalRe","RegExp","source","lastMatch","m","idx","insideQuotes","some","s","e","left","substring","right","endsWith","numLeft","Number","numRight","bothNumeric","isNaN"],"sources":["../../../src/server/lib/template-resolver.ts"],"sourcesContent":["// server/lib/template-resolver.ts — Resolves {{steps.X.output.Y}} and {{trigger.field}} templates\n//\n// Used by workflow engine to flow data between steps.\n// Extends the fillTemplate() pattern from utils.ts with workflow-specific contexts.\n\nexport interface TemplateContext {\n  steps: Record<string, { output?: unknown; status?: string; duration_ms?: number }>;\n  trigger: Record<string, unknown>;\n  input?: unknown;  // For for_each child steps — the current item\n  env?: Record<string, unknown>;\n  workflow?: Record<string, unknown>;  // workflow.id, workflow.store_id, etc.\n  run?: Record<string, unknown>;       // run.id, run.workflow_id, etc.\n}\n\nconst TEMPLATE_REGEX = /\\{\\{([^}]+)\\}\\}/g;\n\n/** Block prototype pollution / traversal attacks */\nconst BLOCKED_PROPS = new Set([\n  \"__proto__\", \"constructor\", \"prototype\",\n  \"__defineGetter__\", \"__defineSetter__\",\n  \"__lookupGetter__\", \"__lookupSetter__\",\n]);\n\n/**\n * Safely walk a dot-path into an object, blocking dangerous property names.\n */\nfunction walkPath(value: unknown, parts: string[], startIndex: number): unknown {\n  let current = value;\n  for (let i = startIndex; i < parts.length; i++) {\n    if (current === null || current === undefined) return undefined;\n    if (typeof current !== \"object\") return undefined;\n    if (BLOCKED_PROPS.has(parts[i])) return undefined; // Block prototype traversal\n    current = (current as Record<string, unknown>)[parts[i]];\n  }\n  return current;\n}\n\n/**\n * Resolve a single template expression like \"steps.check.output.count\" against the context.\n * Returns the resolved value, or undefined if the path doesn't exist.\n */\nfunction resolveExpression(expr: string, ctx: TemplateContext): unknown {\n  const trimmed = expr.trim();\n\n  // Built-in variables\n  if (trimmed === \"now\") return new Date().toISOString();\n  if (trimmed === \"today\") return new Date().toISOString().slice(0, 10);\n  if (trimmed === \"timestamp\") return Date.now();\n\n  // Navigate the dot path\n  const parts = trimmed.split(\".\");\n  const root = parts[0];\n\n  let value: unknown;\n  if (root === \"steps\" && parts.length >= 2) {\n    const stepKey = parts[1];\n    const stepData = ctx.steps[stepKey];\n    if (!stepData) return undefined;\n    value = walkPath(stepData, parts, 2);\n  } else if (root === \"trigger\") {\n    value = walkPath(ctx.trigger, parts, 1);\n  } else if (root === \"input\") {\n    value = walkPath(ctx.input, parts, 1);\n  } else if (root === \"workflow\" && ctx.workflow) {\n    value = walkPath(ctx.workflow, parts, 1);\n  } else if (root === \"run\" && ctx.run) {\n    value = walkPath(ctx.run, parts, 1);\n  } else if (root === \"env\" && ctx.env) {\n    // P0 FIX: Only allow explicitly whitelisted env keys — never expose process.env\n    const ALLOWED_ENV_KEYS = new Set([\"APP_URL\", \"APP_NAME\", \"NODE_ENV\"]);\n    if (parts.length >= 2 && !ALLOWED_ENV_KEYS.has(parts[1])) return undefined;\n    value = walkPath(ctx.env, parts, 1);\n  } else {\n    return undefined;\n  }\n\n  return value;\n}\n\n/**\n * Resolve all {{...}} placeholders in a string.\n * If the entire string is a single template AND the resolved value is not a string,\n * return the raw value (preserving numbers, objects, arrays, booleans).\n */\nfunction resolveString(template: string, ctx: TemplateContext): unknown {\n  // Check if the entire string is a single template expression\n  const singleMatch = template.match(/^\\{\\{([^}]+)\\}\\}$/);\n  if (singleMatch) {\n    const resolved = resolveExpression(singleMatch[1], ctx);\n    return resolved !== undefined ? resolved : template;\n  }\n\n  // Multiple templates or mixed text — string interpolation\n  return template.replace(TEMPLATE_REGEX, (match, expr) => {\n    const resolved = resolveExpression(expr, ctx);\n    if (resolved === undefined) return match;\n    if (typeof resolved === \"object\" && resolved !== null) return JSON.stringify(resolved);\n    return String(resolved);\n  });\n}\n\n/**\n * Recursively resolve templates in any JSON-compatible value.\n * - Strings: resolve {{...}} patterns\n * - Objects: recurse into values\n * - Arrays: recurse into elements\n * - Primitives: return as-is\n */\nexport function resolveTemplate(value: unknown, ctx: TemplateContext, depth = 0): unknown {\n  // Guard against infinite recursion from circular or deeply nested structures\n  if (depth > 20) return value;\n\n  if (typeof value === \"string\") {\n    return resolveString(value, ctx);\n  }\n\n  if (Array.isArray(value)) {\n    return value.map((item) => resolveTemplate(item, ctx, depth + 1));\n  }\n\n  if (value !== null && typeof value === \"object\") {\n    const resolved: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(value as Record<string, unknown>)) {\n      resolved[k] = resolveTemplate(v, ctx, depth + 1);\n    }\n    return resolved;\n  }\n\n  return value;\n}\n\n/**\n * Evaluate a simple condition expression.\n * Supports: ==, !=, >, <, >=, <=, contains, !contains, exists, !exists\n * Templates in the expression are resolved first.\n *\n * Examples:\n *   \"{{steps.check.output.count}} > 10\"\n *   \"{{steps.fetch.output.status}} == 'active'\"\n *   \"{{trigger.type}} != 'test'\"\n */\nexport function evaluateCondition(expression: string, ctx: TemplateContext): boolean {\n  // Resolve all templates in the expression first\n  const resolved = resolveString(expression, ctx);\n  const expr = typeof resolved === 'object' && resolved !== null\n    ? JSON.stringify(resolved)\n    : String(resolved);\n\n  // exists / !exists checks\n  if (expr.includes(\" exists\")) {\n    const parts = expr.split(/\\s+exists/);\n    const val = parts[0].trim();\n    const isNegated = expression.trim().startsWith(\"!\");\n    const exists = val !== \"\" && val !== \"undefined\" && val !== \"null\" && !val.includes(\"{{\");\n    return isNegated ? !exists : exists;\n  }\n\n  // P1 FIX: Use regex-based matching with word boundaries to prevent data containing\n  // operator strings (e.g., \"value >= 10\" in a field) from being misinterpreted\n  const operatorPatterns: [RegExp, string][] = [\n    [/\\s!==\\s/, \"!==\"],\n    [/\\s===\\s/, \"===\"],\n    [/\\s!=\\s/, \"!=\"],\n    [/\\s==\\s/, \"==\"],\n    [/\\s>=\\s/, \">=\"],\n    [/\\s<=\\s/, \"<=\"],\n    [/\\s>\\s/, \">\"],\n    [/\\s<\\s/, \"<\"],\n    [/\\scontains\\s/, \"contains\"],\n    [/\\s!contains\\s/, \"!contains\"],\n  ];\n  // Identify quoted regions to avoid matching operators inside them\n  const quoteRegions: [number, number][] = [];\n  const quoteRe = /(['\"])(?:(?!\\1).)*\\1/g;\n  let qm: RegExpExecArray | null;\n  while ((qm = quoteRe.exec(expr)) !== null) {\n    quoteRegions.push([qm.index, qm.index + qm[0].length]);\n  }\n\n  for (const [pattern, op] of operatorPatterns) {\n    // Use the LAST match that is NOT inside a quoted string.\n    const globalRe = new RegExp(pattern.source, \"g\");\n    let lastMatch: RegExpExecArray | null = null;\n    let m: RegExpExecArray | null;\n    while ((m = globalRe.exec(expr)) !== null) {\n      const idx = m.index;\n      const insideQuotes = quoteRegions.some(([s, e]) => idx > s && idx < e);\n      if (!insideQuotes) lastMatch = m;\n    }\n    if (!lastMatch || lastMatch.index === undefined) continue;\n\n    let left = expr.substring(0, lastMatch.index).trim();\n    let right = expr.substring(lastMatch.index + lastMatch[0].length).trim();\n\n    // Strip quotes from right side\n    if ((right.startsWith(\"'\") && right.endsWith(\"'\")) || (right.startsWith('\"') && right.endsWith('\"'))) {\n      right = right.slice(1, -1);\n    }\n    if ((left.startsWith(\"'\") && left.endsWith(\"'\")) || (left.startsWith('\"') && left.endsWith('\"'))) {\n      left = left.slice(1, -1);\n    }\n\n    const numLeft = Number(left);\n    const numRight = Number(right);\n    const bothNumeric = !isNaN(numLeft) && !isNaN(numRight) && left !== \"\" && right !== \"\";\n\n    switch (op.trim()) {\n      case \"===\":\n      case \"==\":\n        return bothNumeric ? numLeft === numRight : left === right;\n      case \"!==\":\n      case \"!=\":\n        return bothNumeric ? numLeft !== numRight : left !== right;\n      case \">\":\n        return bothNumeric ? numLeft > numRight : left > right;\n      case \"<\":\n        return bothNumeric ? numLeft < numRight : left < right;\n      case \">=\":\n        return bothNumeric ? numLeft >= numRight : left >= right;\n      case \"<=\":\n        return bothNumeric ? numLeft <= numRight : left <= right;\n      case \"contains\":\n        return left.includes(right);\n      case \"!contains\":\n        return !left.includes(right);\n    }\n  }\n\n  // Truthy/falsy check — if expression resolved to a value\n  if (expr === \"true\" || expr === \"1\") return true;\n  if (expr === \"false\" || expr === \"0\" || expr === \"\" || expr === \"null\" || expr === \"undefined\") return false;\n\n  // If there are still unresolved templates, condition is false\n  if (expr.includes(\"{{\")) return false;\n\n  // Non-empty string is truthy\n  return expr.length > 0;\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;;AAWA,MAAMA,cAAc,GAAG,kBAAkB;;AAEzC;AACA,MAAMC,aAAa,GAAG,IAAIC,GAAG,CAAC,CAC5B,WAAW,EAAE,aAAa,EAAE,WAAW,EACvC,kBAAkB,EAAE,kBAAkB,EACtC,kBAAkB,EAAE,kBAAkB,CACvC,CAAC;;AAEF;AACA;AACA;AACA,SAASC,QAAQA,CAACC,KAAc,EAAEC,KAAe,EAAEC,UAAkB,EAAW;EAC9E,IAAIC,OAAO,GAAGH,KAAK;EACnB,KAAK,IAAII,CAAC,GAAGF,UAAU,EAAEE,CAAC,GAAGH,KAAK,CAACI,MAAM,EAAED,CAAC,EAAE,EAAE;IAC9C,IAAID,OAAO,KAAK,IAAI,IAAIA,OAAO,KAAKG,SAAS,EAAE,OAAOA,SAAS;IAC/D,IAAI,OAAOH,OAAO,KAAK,QAAQ,EAAE,OAAOG,SAAS;IACjD,IAAIT,aAAa,CAACU,GAAG,CAACN,KAAK,CAACG,CAAC,CAAC,CAAC,EAAE,OAAOE,SAAS,CAAC,CAAC;IACnDH,OAAO,GAAIA,OAAO,CAA6BF,KAAK,CAACG,CAAC,CAAC,CAAC;EAC1D;EACA,OAAOD,OAAO;AAChB;;AAEA;AACA;AACA;AACA;AACA,SAASK,iBAAiBA,CAACC,IAAY,EAAEC,GAAoB,EAAW;EACtE,MAAMC,OAAO,GAAGF,IAAI,CAACG,IAAI,CAAC,CAAC;;EAE3B;EACA,IAAID,OAAO,KAAK,KAAK,EAAE,OAAO,IAAIE,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;EACtD,IAAIH,OAAO,KAAK,OAAO,EAAE,OAAO,IAAIE,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC,CAACC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;EACrE,IAAIJ,OAAO,KAAK,WAAW,EAAE,OAAOE,IAAI,CAACG,GAAG,CAAC,CAAC;;EAE9C;EACA,MAAMf,KAAK,GAAGU,OAAO,CAACM,KAAK,CAAC,GAAG,CAAC;EAChC,MAAMC,IAAI,GAAGjB,KAAK,CAAC,CAAC,CAAC;EAErB,IAAID,KAAc;EAClB,IAAIkB,IAAI,KAAK,OAAO,IAAIjB,KAAK,CAACI,MAAM,IAAI,CAAC,EAAE;IACzC,MAAMc,OAAO,GAAGlB,KAAK,CAAC,CAAC,CAAC;IACxB,MAAMmB,QAAQ,GAAGV,GAAG,CAACW,KAAK,CAACF,OAAO,CAAC;IACnC,IAAI,CAACC,QAAQ,EAAE,OAAOd,SAAS;IAC/BN,KAAK,GAAGD,QAAQ,CAACqB,QAAQ,EAAEnB,KAAK,EAAE,CAAC,CAAC;EACtC,CAAC,MAAM,IAAIiB,IAAI,KAAK,SAAS,EAAE;IAC7BlB,KAAK,GAAGD,QAAQ,CAACW,GAAG,CAACY,OAAO,EAAErB,KAAK,EAAE,CAAC,CAAC;EACzC,CAAC,MAAM,IAAIiB,IAAI,KAAK,OAAO,EAAE;IAC3BlB,KAAK,GAAGD,QAAQ,CAACW,GAAG,CAACa,KAAK,EAAEtB,KAAK,EAAE,CAAC,CAAC;EACvC,CAAC,MAAM,IAAIiB,IAAI,KAAK,UAAU,IAAIR,GAAG,CAACc,QAAQ,EAAE;IAC9CxB,KAAK,GAAGD,QAAQ,CAACW,GAAG,CAACc,QAAQ,EAAEvB,KAAK,EAAE,CAAC,CAAC;EAC1C,CAAC,MAAM,IAAIiB,IAAI,KAAK,KAAK,IAAIR,GAAG,CAACe,GAAG,EAAE;IACpCzB,KAAK,GAAGD,QAAQ,CAACW,GAAG,CAACe,GAAG,EAAExB,KAAK,EAAE,CAAC,CAAC;EACrC,CAAC,MAAM,IAAIiB,IAAI,KAAK,KAAK,IAAIR,GAAG,CAACgB,GAAG,EAAE;IACpC;IACA,MAAMC,gBAAgB,GAAG,IAAI7B,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACrE,IAAIG,KAAK,CAACI,MAAM,IAAI,CAAC,IAAI,CAACsB,gBAAgB,CAACpB,GAAG,CAACN,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAOK,SAAS;IAC1EN,KAAK,GAAGD,QAAQ,CAACW,GAAG,CAACgB,GAAG,EAAEzB,KAAK,EAAE,CAAC,CAAC;EACrC,CAAC,MAAM;IACL,OAAOK,SAAS;EAClB;EAEA,OAAON,KAAK;AACd;;AAEA;AACA;AACA;AACA;AACA;AACA,SAAS4B,aAAaA,CAACC,QAAgB,EAAEnB,GAAoB,EAAW;EACtE;EACA,MAAMoB,WAAW,GAAGD,QAAQ,CAACE,KAAK,CAAC,mBAAmB,CAAC;EACvD,IAAID,WAAW,EAAE;IACf,MAAME,QAAQ,GAAGxB,iBAAiB,CAACsB,WAAW,CAAC,CAAC,CAAC,EAAEpB,GAAG,CAAC;IACvD,OAAOsB,QAAQ,KAAK1B,SAAS,GAAG0B,QAAQ,GAAGH,QAAQ;EACrD;;EAEA;EACA,OAAOA,QAAQ,CAACI,OAAO,CAACrC,cAAc,EAAE,CAACmC,KAAK,EAAEtB,IAAI,KAAK;IACvD,MAAMuB,QAAQ,GAAGxB,iBAAiB,CAACC,IAAI,EAAEC,GAAG,CAAC;IAC7C,IAAIsB,QAAQ,KAAK1B,SAAS,EAAE,OAAOyB,KAAK;IACxC,IAAI,OAAOC,QAAQ,KAAK,QAAQ,IAAIA,QAAQ,KAAK,IAAI,EAAE,OAAOE,IAAI,CAACC,SAAS,CAACH,QAAQ,CAAC;IACtF,OAAOI,MAAM,CAACJ,QAAQ,CAAC;EACzB,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASK,eAAeA,CAACrC,KAAc,EAAEU,GAAoB,EAAE4B,KAAK,GAAG,CAAC,EAAW;EACxF;EACA,IAAIA,KAAK,GAAG,EAAE,EAAE,OAAOtC,KAAK;EAE5B,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE;IAC7B,OAAO4B,aAAa,CAAC5B,KAAK,EAAEU,GAAG,CAAC;EAClC;EAEA,IAAI6B,KAAK,CAACC,OAAO,CAACxC,KAAK,CAAC,EAAE;IACxB,OAAOA,KAAK,CAACyC,GAAG,CAAEC,IAAI,IAAKL,eAAe,CAACK,IAAI,EAAEhC,GAAG,EAAE4B,KAAK,GAAG,CAAC,CAAC,CAAC;EACnE;EAEA,IAAItC,KAAK,KAAK,IAAI,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE;IAC/C,MAAMgC,QAAiC,GAAG,CAAC,CAAC;IAC5C,KAAK,MAAM,CAACW,CAAC,EAAEC,CAAC,CAAC,IAAIC,MAAM,CAACC,OAAO,CAAC9C,KAAgC,CAAC,EAAE;MACrEgC,QAAQ,CAACW,CAAC,CAAC,GAAGN,eAAe,CAACO,CAAC,EAAElC,GAAG,EAAE4B,KAAK,GAAG,CAAC,CAAC;IAClD;IACA,OAAON,QAAQ;EACjB;EAEA,OAAOhC,KAAK;AACd;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAS+C,iBAAiBA,CAACC,UAAkB,EAAEtC,GAAoB,EAAW;EACnF;EACA,MAAMsB,QAAQ,GAAGJ,aAAa,CAACoB,UAAU,EAAEtC,GAAG,CAAC;EAC/C,MAAMD,IAAI,GAAG,OAAOuB,QAAQ,KAAK,QAAQ,IAAIA,QAAQ,KAAK,IAAI,GAC1DE,IAAI,CAACC,SAAS,CAACH,QAAQ,CAAC,GACxBI,MAAM,CAACJ,QAAQ,CAAC;;EAEpB;EACA,IAAIvB,IAAI,CAACwC,QAAQ,CAAC,SAAS,CAAC,EAAE;IAC5B,MAAMhD,KAAK,GAAGQ,IAAI,CAACQ,KAAK,CAAC,WAAW,CAAC;IACrC,MAAMiC,GAAG,GAAGjD,KAAK,CAAC,CAAC,CAAC,CAACW,IAAI,CAAC,CAAC;IAC3B,MAAMuC,SAAS,GAAGH,UAAU,CAACpC,IAAI,CAAC,CAAC,CAACwC,UAAU,CAAC,GAAG,CAAC;IACnD,MAAMC,MAAM,GAAGH,GAAG,KAAK,EAAE,IAAIA,GAAG,KAAK,WAAW,IAAIA,GAAG,KAAK,MAAM,IAAI,CAACA,GAAG,CAACD,QAAQ,CAAC,IAAI,CAAC;IACzF,OAAOE,SAAS,GAAG,CAACE,MAAM,GAAGA,MAAM;EACrC;;EAEA;EACA;EACA,MAAMC,gBAAoC,GAAG,CAC3C,CAAC,SAAS,EAAE,KAAK,CAAC,EAClB,CAAC,SAAS,EAAE,KAAK,CAAC,EAClB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAChB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAChB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAChB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAChB,CAAC,OAAO,EAAE,GAAG,CAAC,EACd,CAAC,OAAO,EAAE,GAAG,CAAC,EACd,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,CAAC,eAAe,EAAE,WAAW,CAAC,CAC/B;EACD;EACA,MAAMC,YAAgC,GAAG,EAAE;EAC3C,MAAMC,OAAO,GAAG,uBAAuB;EACvC,IAAIC,EAA0B;EAC9B,OAAO,CAACA,EAAE,GAAGD,OAAO,CAACE,IAAI,CAACjD,IAAI,CAAC,MAAM,IAAI,EAAE;IACzC8C,YAAY,CAACI,IAAI,CAAC,CAACF,EAAE,CAACG,KAAK,EAAEH,EAAE,CAACG,KAAK,GAAGH,EAAE,CAAC,CAAC,CAAC,CAACpD,MAAM,CAAC,CAAC;EACxD;EAEA,KAAK,MAAM,CAACwD,OAAO,EAAEC,EAAE,CAAC,IAAIR,gBAAgB,EAAE;IAC5C;IACA,MAAMS,QAAQ,GAAG,IAAIC,MAAM,CAACH,OAAO,CAACI,MAAM,EAAE,GAAG,CAAC;IAChD,IAAIC,SAAiC,GAAG,IAAI;IAC5C,IAAIC,CAAyB;IAC7B,OAAO,CAACA,CAAC,GAAGJ,QAAQ,CAACL,IAAI,CAACjD,IAAI,CAAC,MAAM,IAAI,EAAE;MACzC,MAAM2D,GAAG,GAAGD,CAAC,CAACP,KAAK;MACnB,MAAMS,YAAY,GAAGd,YAAY,CAACe,IAAI,CAAC,CAAC,CAACC,CAAC,EAAEC,CAAC,CAAC,KAAKJ,GAAG,GAAGG,CAAC,IAAIH,GAAG,GAAGI,CAAC,CAAC;MACtE,IAAI,CAACH,YAAY,EAAEH,SAAS,GAAGC,CAAC;IAClC;IACA,IAAI,CAACD,SAAS,IAAIA,SAAS,CAACN,KAAK,KAAKtD,SAAS,EAAE;IAEjD,IAAImE,IAAI,GAAGhE,IAAI,CAACiE,SAAS,CAAC,CAAC,EAAER,SAAS,CAACN,KAAK,CAAC,CAAChD,IAAI,CAAC,CAAC;IACpD,IAAI+D,KAAK,GAAGlE,IAAI,CAACiE,SAAS,CAACR,SAAS,CAACN,KAAK,GAAGM,SAAS,CAAC,CAAC,CAAC,CAAC7D,MAAM,CAAC,CAACO,IAAI,CAAC,CAAC;;IAExE;IACA,IAAK+D,KAAK,CAACvB,UAAU,CAAC,GAAG,CAAC,IAAIuB,KAAK,CAACC,QAAQ,CAAC,GAAG,CAAC,IAAMD,KAAK,CAACvB,UAAU,CAAC,GAAG,CAAC,IAAIuB,KAAK,CAACC,QAAQ,CAAC,GAAG,CAAE,EAAE;MACpGD,KAAK,GAAGA,KAAK,CAAC5D,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B;IACA,IAAK0D,IAAI,CAACrB,UAAU,CAAC,GAAG,CAAC,IAAIqB,IAAI,CAACG,QAAQ,CAAC,GAAG,CAAC,IAAMH,IAAI,CAACrB,UAAU,CAAC,GAAG,CAAC,IAAIqB,IAAI,CAACG,QAAQ,CAAC,GAAG,CAAE,EAAE;MAChGH,IAAI,GAAGA,IAAI,CAAC1D,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B;IAEA,MAAM8D,OAAO,GAAGC,MAAM,CAACL,IAAI,CAAC;IAC5B,MAAMM,QAAQ,GAAGD,MAAM,CAACH,KAAK,CAAC;IAC9B,MAAMK,WAAW,GAAG,CAACC,KAAK,CAACJ,OAAO,CAAC,IAAI,CAACI,KAAK,CAACF,QAAQ,CAAC,IAAIN,IAAI,KAAK,EAAE,IAAIE,KAAK,KAAK,EAAE;IAEtF,QAAQb,EAAE,CAAClD,IAAI,CAAC,CAAC;MACf,KAAK,KAAK;MACV,KAAK,IAAI;QACP,OAAOoE,WAAW,GAAGH,OAAO,KAAKE,QAAQ,GAAGN,IAAI,KAAKE,KAAK;MAC5D,KAAK,KAAK;MACV,KAAK,IAAI;QACP,OAAOK,WAAW,GAAGH,OAAO,KAAKE,QAAQ,GAAGN,IAAI,KAAKE,KAAK;MAC5D,KAAK,GAAG;QACN,OAAOK,WAAW,GAAGH,OAAO,GAAGE,QAAQ,GAAGN,IAAI,GAAGE,KAAK;MACxD,KAAK,GAAG;QACN,OAAOK,WAAW,GAAGH,OAAO,GAAGE,QAAQ,GAAGN,IAAI,GAAGE,KAAK;MACxD,KAAK,IAAI;QACP,OAAOK,WAAW,GAAGH,OAAO,IAAIE,QAAQ,GAAGN,IAAI,IAAIE,KAAK;MAC1D,KAAK,IAAI;QACP,OAAOK,WAAW,GAAGH,OAAO,IAAIE,QAAQ,GAAGN,IAAI,IAAIE,KAAK;MAC1D,KAAK,UAAU;QACb,OAAOF,IAAI,CAACxB,QAAQ,CAAC0B,KAAK,CAAC;MAC7B,KAAK,WAAW;QACd,OAAO,CAACF,IAAI,CAACxB,QAAQ,CAAC0B,KAAK,CAAC;IAChC;EACF;;EAEA;EACA,IAAIlE,IAAI,KAAK,MAAM,IAAIA,IAAI,KAAK,GAAG,EAAE,OAAO,IAAI;EAChD,IAAIA,IAAI,KAAK,OAAO,IAAIA,IAAI,KAAK,GAAG,IAAIA,IAAI,KAAK,EAAE,IAAIA,IAAI,KAAK,MAAM,IAAIA,IAAI,KAAK,WAAW,EAAE,OAAO,KAAK;;EAE5G;EACA,IAAIA,IAAI,CAACwC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK;;EAErC;EACA,OAAOxC,IAAI,CAACJ,MAAM,GAAG,CAAC;AACxB","ignoreList":[]}

package/dist/server/lib/utils.js

@@ -1,162 +1,271 @@
 // server/lib/utils.ts — Shared utility functions
+
 /** Escape characters that could manipulate PostgREST/ILIKE filter syntax.
  * Escapes ILIKE wildcards (%, _) and backslashes, plus strips commas and parens
  * that could manipulate PostgREST operators. */
 export function sanitizeFilterValue(val) {
-    // First escape ILIKE wildcards and backslashes
-    let escaped = val.replace(/[\\%_]/g, (ch) => `\\${ch}`);
-    // Then strip PostgREST operator chars
-    escaped = escaped.replace(/[,\(\)]/g, "");
-    return escaped;
+  // First escape ILIKE wildcards and backslashes
+  let escaped = val.replace(/[\\%_]/g, ch => `\\${ch}`);
+  // Then strip PostgREST operator chars
+  escaped = escaped.replace(/[,\(\)]/g, "");
+  return escaped;
 }
+
 /** Group array items by a key, returning counts */
 export function groupBy(arr, key) {
-    const counts = {};
-    for (const item of arr) {
-        const val = item[key] || "unknown";
-        counts[val] = (counts[val] || 0) + 1;
-    }
-    return counts;
+  const counts = {};
+  for (const item of arr) {
+    const val = item[key] || "unknown";
+    counts[val] = (counts[val] || 0) + 1;
+  }
+  return counts;
 }
+
 /** Escape a value for CSV output */
 export function escapeCSV(val) {
-    if (val === null || val === undefined)
-        return "";
-    const str = String(val);
-    if (str.includes(",") || str.includes('"') || str.includes("\n")) {
-        return '"' + str.replace(/"/g, '""') + '"';
-    }
-    return str;
+  if (val === null || val === undefined) return "";
+  const str = String(val);
+  if (str.includes(",") || str.includes('"') || str.includes("\n")) {
+    return '"' + str.replace(/"/g, '""') + '"';
+  }
+  return str;
 }
+
 /** Fill {{key}} placeholders in a template string */
 export function fillTemplate(template, data) {
-    return template.replace(/\{\{(\w+(?:\.\w+)*)\}\}/g, (match, key) => {
-        const parts = key.split(".");
-        let val = data;
-        for (const p of parts) {
-            if (val === null || val === undefined)
-                return match;
-            val = val[p];
-        }
-        return val !== null && val !== undefined ? String(val) : match;
-    });
+  return template.replace(/\{\{(\w+(?:\.\w+)*)\}\}/g, (match, key) => {
+    const parts = key.split(".");
+    let val = data;
+    for (const p of parts) {
+      if (val === null || val === undefined) return match;
+      val = val[p];
+    }
+    return val !== null && val !== undefined ? String(val) : match;
+  });
 }
+
 /** Extract concise metrics from tool results for audit logging (never full payloads). */
 export function summarizeResult(toolName, action, data) {
-    const d = data;
-    try {
-        switch (toolName) {
-            case "analytics": {
-                switch (action) {
-                    case "summary": {
-                        if (Array.isArray(d)) {
-                            const row = d[0] || {};
-                            return { total_revenue: row.totalRevenue || row.total_revenue, total_orders: row.totalOrders || row.total_orders, avg_order: row.avgOrderValue || row.avg_order_value, rows: d.length };
-                        }
-                        return { total_revenue: d.totalRevenue || d.total_revenue, total_orders: d.totalOrders || d.total_orders, avg_order: d.avgOrderValue, profit_margin: d.profitMargin, unique_customers: d.uniqueCustomers };
-                    }
-                    case "by_location":
-                        return { locations: Array.isArray(d) ? d.length : 0, total_revenue: Array.isArray(d) ? d.reduce((s, r) => s + (r.revenue || 0), 0) : 0 };
-                    case "detailed":
-                        return { rows: Array.isArray(d) ? d.length : 0 };
-                    case "by_category":
-                        return { categories: d.categories ? d.categories.length : 0, total_revenue: d.totalRevenue, days: d.days };
-                    case "product_sales":
-                        return { products: d.products ? d.products.length : 0, total_revenue: d.totalRevenue, total_units: d.totalUnits, days: d.days };
-                    case "category_velocity":
-                        return { items: d.results ? d.results.length : 0, days: d.days };
-                    case "customers":
-                    case "customer_intelligence":
-                        return { rows: Array.isArray(d) ? d.length : (d.customers ? d.customers.length : 0) };
-                    case "products":
-                    case "product_intelligence":
-                        return { rows: Array.isArray(d) ? d.length : 0 };
-                    case "inventory_intelligence":
-                        return { rows: Array.isArray(d) ? d.length : 0 };
-                    case "marketing":
-                    case "marketing_intelligence":
-                        return { rows: Array.isArray(d) ? d.length : 0 };
-                    case "fraud":
-                    case "fraud_detection":
-                        return { total_orders: d.totalOrders, high_risk: d.highRisk, medium_risk: d.mediumRisk, avg_risk_score: d.avgRiskScore };
-                    case "employee":
-                    case "employee_performance":
-                        return { rows: Array.isArray(d) ? d.length : 0 };
-                    case "behavior":
-                    case "behavioral_analytics":
-                        return { sessions: d.summary?.sessions, page_views: d.summary?.pageViews };
-                    case "full":
-                    case "business_intelligence":
-                        return { rows: Array.isArray(d) ? d.length : 0 };
-                    case "discover":
-                        return { rows: Array.isArray(d) ? d.length : 0 };
-                    default:
-                        return { rows: Array.isArray(d) ? d.length : 1 };
+  const d = data;
+  try {
+    switch (toolName) {
+      case "analytics":
+        {
+          switch (action) {
+            case "summary":
+              {
+                if (Array.isArray(d)) {
+                  const row = d[0] || {};
+                  return {
+                    total_revenue: row.totalRevenue || row.total_revenue,
+                    total_orders: row.totalOrders || row.total_orders,
+                    avg_order: row.avgOrderValue || row.avg_order_value,
+                    rows: d.length
+                  };
                 }
-            }
-            case "inventory":
-                return { action, rows: Array.isArray(d) ? d.length : 1 };
-            case "inventory_query":
-                return { action, rows: Array.isArray(d) ? d.length : (d.products ? d.products.length : (d.summary ? 1 : 0)) };
-            case "purchase_orders":
-                if (action === "list")
-                    return { count: Array.isArray(d) ? d.length : (d.purchase_orders ? d.purchase_orders.length : 0) };
-                return { po_id: d.id, po_number: d.po_number, status: d.status };
-            case "transfers":
-                if (action === "list")
-                    return { count: Array.isArray(d) ? d.length : 0 };
-                return { transfer_id: d.id, transfer_number: d.transfer_number, status: d.status };
-            case "orders":
-                return { count: Array.isArray(d) ? d.length : (d.orders ? d.orders.length : 1) };
+                return {
+                  total_revenue: d.totalRevenue || d.total_revenue,
+                  total_orders: d.totalOrders || d.total_orders,
+                  avg_order: d.avgOrderValue,
+                  profit_margin: d.profitMargin,
+                  unique_customers: d.uniqueCustomers
+                };
+              }
+            case "by_location":
+              return {
+                locations: Array.isArray(d) ? d.length : 0,
+                total_revenue: Array.isArray(d) ? d.reduce((s, r) => s + (r.revenue || 0), 0) : 0
+              };
+            case "detailed":
+              return {
+                rows: Array.isArray(d) ? d.length : 0
+              };
+            case "by_category":
+              return {
+                categories: d.categories ? d.categories.length : 0,
+                total_revenue: d.totalRevenue,
+                days: d.days
+              };
+            case "product_sales":
+              return {
+                products: d.products ? d.products.length : 0,
+                total_revenue: d.totalRevenue,
+                total_units: d.totalUnits,
+                days: d.days
+              };
+            case "category_velocity":
+              return {
+                items: d.results ? d.results.length : 0,
+                days: d.days
+              };
             case "customers":
-                return { count: Array.isArray(d) ? d.length : (d.customers ? d.customers.length : 1) };
+            case "customer_intelligence":
+              return {
+                rows: Array.isArray(d) ? d.length : d.customers ? d.customers.length : 0
+              };
             case "products":
-                if (action === "browse")
-                    return { categories: d.data ? d.data.categories?.length || 0 : 0, status_summary: d.data ? d.data.product_status_summary : undefined };
-                return { action, count: Array.isArray(d) ? d.length : (d.count ?? (d.products ? d.products.length : (d.id ? 1 : 0))) };
-            case "media": {
-                if (action === "list" || action === "search")
-                    return { count: d.count, total: d.total };
-                if (action === "analytics")
-                    return { total_items: d.total_items, orphan_count: d.orphan_count, storage_mb: d.total_storage_mb };
-                if (action === "upload")
-                    return { media_id: d.media_id, file_name: d.file_name };
-                if (action === "bulk_upload")
-                    return { uploaded_count: d.uploaded_count, failed_count: d.failed_count };
-                if (action === "bulk_update")
-                    return { updated_count: d.updated_count, failed_count: d.failed_count };
-                if (action === "usage")
-                    return { reference_count: d.reference_count };
-                return { action };
-            }
-            case "audit_trail":
-                return { count: d.count, days: d.days, actions: d.summary ? Object.keys(d.summary).length : 0 };
-            case "telemetry":
-                return { action, count: d.count || (Array.isArray(d) ? d.length : 0) };
-            case "alerts":
-                return { total: d.total };
+            case "product_intelligence":
+              return {
+                rows: Array.isArray(d) ? d.length : 0
+              };
+            case "inventory_intelligence":
+              return {
+                rows: Array.isArray(d) ? d.length : 0
+              };
+            case "marketing":
+            case "marketing_intelligence":
+              return {
+                rows: Array.isArray(d) ? d.length : 0
+              };
+            case "fraud":
+            case "fraud_detection":
+              return {
+                total_orders: d.totalOrders,
+                high_risk: d.highRisk,
+                medium_risk: d.mediumRisk,
+                avg_risk_score: d.avgRiskScore
+              };
+            case "employee":
+            case "employee_performance":
+              return {
+                rows: Array.isArray(d) ? d.length : 0
+              };
+            case "behavior":
+            case "behavioral_analytics":
+              return {
+                sessions: d.summary?.sessions,
+                page_views: d.summary?.pageViews
+              };
+            case "full":
+            case "business_intelligence":
+              return {
+                rows: Array.isArray(d) ? d.length : 0
+              };
+            case "discover":
+              return {
+                rows: Array.isArray(d) ? d.length : 0
+              };
             default:
-                return { rows: Array.isArray(d) ? d.length : 1 };
+              return {
+                rows: Array.isArray(d) ? d.length : 1
+              };
+          }
         }
+      case "inventory":
+        return {
+          action,
+          rows: Array.isArray(d) ? d.length : 1
+        };
+      case "inventory_query":
+        return {
+          action,
+          rows: Array.isArray(d) ? d.length : d.products ? d.products.length : d.summary ? 1 : 0
+        };
+      case "purchase_orders":
+        if (action === "list") return {
+          count: Array.isArray(d) ? d.length : d.purchase_orders ? d.purchase_orders.length : 0
+        };
+        return {
+          po_id: d.id,
+          po_number: d.po_number,
+          status: d.status
+        };
+      case "transfers":
+        if (action === "list") return {
+          count: Array.isArray(d) ? d.length : 0
+        };
+        return {
+          transfer_id: d.id,
+          transfer_number: d.transfer_number,
+          status: d.status
+        };
+      case "orders":
+        return {
+          count: Array.isArray(d) ? d.length : d.orders ? d.orders.length : 1
+        };
+      case "customers":
+        return {
+          count: Array.isArray(d) ? d.length : d.customers ? d.customers.length : 1
+        };
+      case "products":
+        if (action === "browse") return {
+          categories: d.data ? d.data.categories?.length || 0 : 0,
+          status_summary: d.data ? d.data.product_status_summary : undefined
+        };
+        return {
+          action,
+          count: Array.isArray(d) ? d.length : d.count ?? (d.products ? d.products.length : d.id ? 1 : 0)
+        };
+      case "media":
+        {
+          if (action === "list" || action === "search") return {
+            count: d.count,
+            total: d.total
+          };
+          if (action === "analytics") return {
+            total_items: d.total_items,
+            orphan_count: d.orphan_count,
+            storage_mb: d.total_storage_mb
+          };
+          if (action === "upload") return {
+            media_id: d.media_id,
+            file_name: d.file_name
+          };
+          if (action === "bulk_upload") return {
+            uploaded_count: d.uploaded_count,
+            failed_count: d.failed_count
+          };
+          if (action === "bulk_update") return {
+            updated_count: d.updated_count,
+            failed_count: d.failed_count
+          };
+          if (action === "usage") return {
+            reference_count: d.reference_count
+          };
+          return {
+            action
+          };
+        }
+      case "audit_trail":
+        return {
+          count: d.count,
+          days: d.days,
+          actions: d.summary ? Object.keys(d.summary).length : 0
+        };
+      case "telemetry":
+        return {
+          action,
+          count: d.count || (Array.isArray(d) ? d.length : 0)
+        };
+      case "alerts":
+        return {
+          total: d.total
+        };
+      default:
+        return {
+          rows: Array.isArray(d) ? d.length : 1
+        };
     }
-    catch {
-        return { rows: Array.isArray(d) ? d.length : 1 };
-    }
+  } catch {
+    return {
+      rows: Array.isArray(d) ? d.length : 1
+    };
+  }
 }
+
 /** Timeout wrapper for tool execution with AbortSignal support.
  * Creates an AbortController, races the promise against a timeout,
  * and aborts the signal on timeout so underlying work (fetch etc.) can cancel. */
 export function withTimeout(promiseOrFactory, ms, name) {
-    const controller = new AbortController();
-    const promise = typeof promiseOrFactory === "function"
-        ? promiseOrFactory(controller.signal)
-        : promiseOrFactory;
-    let timer;
-    const timeoutPromise = new Promise((_, reject) => {
-        timer = setTimeout(() => {
-            controller.abort();
-            reject(new Error(`Tool ${name} timed out after ${ms}ms`));
-        }, ms);
-    });
-    return Promise.race([promise, timeoutPromise]).finally(() => clearTimeout(timer));
+  const controller = new AbortController();
+  const promise = typeof promiseOrFactory === "function" ? promiseOrFactory(controller.signal) : promiseOrFactory;
+  let timer;
+  const timeoutPromise = new Promise((_, reject) => {
+    timer = setTimeout(() => {
+      controller.abort();
+      reject(new Error(`Tool ${name} timed out after ${ms}ms`));
+    }, ms);
+  });
+  return Promise.race([promise, timeoutPromise]).finally(() => clearTimeout(timer));
 }
+//# sourceMappingURL=utils.js.map

package/dist/server/lib/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","names":["sanitizeFilterValue","val","escaped","replace","ch","groupBy","arr","key","counts","item","escapeCSV","undefined","str","String","includes","fillTemplate","template","data","match","parts","split","p","summarizeResult","toolName","action","d","Array","isArray","row","total_revenue","totalRevenue","total_orders","totalOrders","avg_order","avgOrderValue","avg_order_value","rows","length","profit_margin","profitMargin","unique_customers","uniqueCustomers","locations","reduce","s","r","revenue","categories","days","products","total_units","totalUnits","items","results","customers","high_risk","highRisk","medium_risk","mediumRisk","avg_risk_score","avgRiskScore","sessions","summary","page_views","pageViews","count","purchase_orders","po_id","id","po_number","status","transfer_id","transfer_number","orders","status_summary","product_status_summary","total","total_items","orphan_count","storage_mb","total_storage_mb","media_id","file_name","uploaded_count","failed_count","updated_count","reference_count","actions","Object","keys","withTimeout","promiseOrFactory","ms","name","controller","AbortController","promise","signal","timer","timeoutPromise","Promise","_","reject","setTimeout","abort","Error","race","finally","clearTimeout"],"sources":["../../../src/server/lib/utils.ts"],"sourcesContent":["// server/lib/utils.ts — Shared utility functions\n\n/** Escape characters that could manipulate PostgREST/ILIKE filter syntax.\n * Escapes ILIKE wildcards (%, _) and backslashes, plus strips commas and parens\n * that could manipulate PostgREST operators. */\nexport function sanitizeFilterValue(val: string): string {\n  // First escape ILIKE wildcards and backslashes\n  let escaped = val.replace(/[\\\\%_]/g, (ch) => `\\\\${ch}`);\n  // Then strip PostgREST operator chars\n  escaped = escaped.replace(/[,\\(\\)]/g, \"\");\n  return escaped;\n}\n\n/** Group array items by a key, returning counts */\nexport function groupBy(arr: Record<string, unknown>[], key: string): Record<string, number> {\n  const counts: Record<string, number> = {};\n  for (const item of arr) {\n    const val = (item[key] as string) || \"unknown\";\n    counts[val] = (counts[val] || 0) + 1;\n  }\n  return counts;\n}\n\n/** Escape a value for CSV output */\nexport function escapeCSV(val: unknown): string {\n  if (val === null || val === undefined) return \"\";\n  const str = String(val);\n  if (str.includes(\",\") || str.includes('\"') || str.includes(\"\\n\")) {\n    return '\"' + str.replace(/\"/g, '\"\"') + '\"';\n  }\n  return str;\n}\n\n/** Fill {{key}} placeholders in a template string */\nexport function fillTemplate(template: string, data: Record<string, unknown>): string {\n  return template.replace(/\\{\\{(\\w+(?:\\.\\w+)*)\\}\\}/g, (match, key) => {\n    const parts = (key as string).split(\".\");\n    let val: unknown = data;\n    for (const p of parts) {\n      if (val === null || val === undefined) return match;\n      val = (val as Record<string, unknown>)[p];\n    }\n    return val !== null && val !== undefined ? String(val) : match;\n  });\n}\n\n/** Extract concise metrics from tool results for audit logging (never full payloads). */\nexport function summarizeResult(toolName: string, action: string | undefined, data: unknown): Record<string, unknown> {\n  const d = data as Record<string, unknown>;\n  try {\n    switch (toolName) {\n      case \"analytics\": {\n        switch (action) {\n          case \"summary\": {\n            if (Array.isArray(d)) {\n              const row = d[0] || {};\n              return { total_revenue: row.totalRevenue || row.total_revenue, total_orders: row.totalOrders || row.total_orders, avg_order: row.avgOrderValue || row.avg_order_value, rows: d.length };\n            }\n            return { total_revenue: d.totalRevenue || d.total_revenue, total_orders: d.totalOrders || d.total_orders, avg_order: d.avgOrderValue, profit_margin: d.profitMargin, unique_customers: d.uniqueCustomers };\n          }\n          case \"by_location\":\n            return { locations: Array.isArray(d) ? d.length : 0, total_revenue: Array.isArray(d) ? d.reduce((s: number, r: any) => s + (r.revenue || 0), 0) : 0 };\n          case \"detailed\":\n            return { rows: Array.isArray(d) ? d.length : 0 };\n          case \"by_category\":\n            return { categories: d.categories ? (d.categories as any[]).length : 0, total_revenue: d.totalRevenue, days: d.days };\n          case \"product_sales\":\n            return { products: d.products ? (d.products as any[]).length : 0, total_revenue: d.totalRevenue, total_units: d.totalUnits, days: d.days };\n          case \"category_velocity\":\n            return { items: d.results ? (d.results as any[]).length : 0, days: d.days };\n          case \"customers\":\n          case \"customer_intelligence\":\n            return { rows: Array.isArray(d) ? d.length : (d.customers ? (d.customers as any[]).length : 0) };\n          case \"products\":\n          case \"product_intelligence\":\n            return { rows: Array.isArray(d) ? d.length : 0 };\n          case \"inventory_intelligence\":\n            return { rows: Array.isArray(d) ? d.length : 0 };\n          case \"marketing\":\n          case \"marketing_intelligence\":\n            return { rows: Array.isArray(d) ? d.length : 0 };\n          case \"fraud\":\n          case \"fraud_detection\":\n            return { total_orders: d.totalOrders, high_risk: d.highRisk, medium_risk: d.mediumRisk, avg_risk_score: d.avgRiskScore };\n          case \"employee\":\n          case \"employee_performance\":\n            return { rows: Array.isArray(d) ? d.length : 0 };\n          case \"behavior\":\n          case \"behavioral_analytics\":\n            return { sessions: (d.summary as any)?.sessions, page_views: (d.summary as any)?.pageViews };\n          case \"full\":\n          case \"business_intelligence\":\n            return { rows: Array.isArray(d) ? d.length : 0 };\n          case \"discover\":\n            return { rows: Array.isArray(d) ? d.length : 0 };\n          default:\n            return { rows: Array.isArray(d) ? d.length : 1 };\n        }\n      }\n      case \"inventory\":\n        return { action, rows: Array.isArray(d) ? d.length : 1 };\n      case \"inventory_query\":\n        return { action, rows: Array.isArray(d) ? d.length : (d.products ? (d.products as any[]).length : (d.summary ? 1 : 0)) };\n      case \"purchase_orders\":\n        if (action === \"list\") return { count: Array.isArray(d) ? d.length : (d.purchase_orders ? (d.purchase_orders as any[]).length : 0) };\n        return { po_id: d.id, po_number: d.po_number, status: d.status };\n      case \"transfers\":\n        if (action === \"list\") return { count: Array.isArray(d) ? d.length : 0 };\n        return { transfer_id: d.id, transfer_number: d.transfer_number, status: d.status };\n      case \"orders\":\n        return { count: Array.isArray(d) ? d.length : (d.orders ? (d.orders as any[]).length : 1) };\n      case \"customers\":\n        return { count: Array.isArray(d) ? d.length : (d.customers ? (d.customers as any[]).length : 1) };\n      case \"products\":\n        if (action === \"browse\") return { categories: d.data ? (d.data as any).categories?.length || 0 : 0, status_summary: d.data ? (d.data as any).product_status_summary : undefined };\n        return { action, count: Array.isArray(d) ? d.length : (d.count ?? (d.products ? (d.products as any[]).length : (d.id ? 1 : 0))) };\n      case \"media\": {\n        if (action === \"list\" || action === \"search\") return { count: d.count, total: d.total };\n        if (action === \"analytics\") return { total_items: d.total_items, orphan_count: d.orphan_count, storage_mb: d.total_storage_mb };\n        if (action === \"upload\") return { media_id: d.media_id, file_name: d.file_name };\n        if (action === \"bulk_upload\") return { uploaded_count: d.uploaded_count, failed_count: d.failed_count };\n        if (action === \"bulk_update\") return { updated_count: d.updated_count, failed_count: d.failed_count };\n        if (action === \"usage\") return { reference_count: d.reference_count };\n        return { action };\n      }\n      case \"audit_trail\":\n        return { count: d.count, days: d.days, actions: d.summary ? Object.keys(d.summary as object).length : 0 };\n      case \"telemetry\":\n        return { action, count: d.count || (Array.isArray(d) ? d.length : 0) };\n      case \"alerts\":\n        return { total: d.total };\n      default:\n        return { rows: Array.isArray(d) ? d.length : 1 };\n    }\n  } catch {\n    return { rows: Array.isArray(d) ? d.length : 1 };\n  }\n}\n\n/** Timeout wrapper for tool execution with AbortSignal support.\n * Creates an AbortController, races the promise against a timeout,\n * and aborts the signal on timeout so underlying work (fetch etc.) can cancel. */\nexport function withTimeout<T>(\n  promiseOrFactory: Promise<T> | ((signal: AbortSignal) => Promise<T>),\n  ms: number,\n  name: string,\n): Promise<T> {\n  const controller = new AbortController();\n  const promise = typeof promiseOrFactory === \"function\"\n    ? promiseOrFactory(controller.signal)\n    : promiseOrFactory;\n\n  let timer: ReturnType<typeof setTimeout>;\n  const timeoutPromise = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => {\n      controller.abort();\n      reject(new Error(`Tool ${name} timed out after ${ms}ms`));\n    }, ms);\n  });\n\n  return Promise.race([promise, timeoutPromise]).finally(() => clearTimeout(timer));\n}\n\n"],"mappings":"AAAA;;AAEA;AACA;AACA;AACA,OAAO,SAASA,mBAAmBA,CAACC,GAAW,EAAU;EACvD;EACA,IAAIC,OAAO,GAAGD,GAAG,CAACE,OAAO,CAAC,SAAS,EAAGC,EAAE,IAAK,KAAKA,EAAE,EAAE,CAAC;EACvD;EACAF,OAAO,GAAGA,OAAO,CAACC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;EACzC,OAAOD,OAAO;AAChB;;AAEA;AACA,OAAO,SAASG,OAAOA,CAACC,GAA8B,EAAEC,GAAW,EAA0B;EAC3F,MAAMC,MAA8B,GAAG,CAAC,CAAC;EACzC,KAAK,MAAMC,IAAI,IAAIH,GAAG,EAAE;IACtB,MAAML,GAAG,GAAIQ,IAAI,CAACF,GAAG,CAAC,IAAe,SAAS;IAC9CC,MAAM,CAACP,GAAG,CAAC,GAAG,CAACO,MAAM,CAACP,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;EACtC;EACA,OAAOO,MAAM;AACf;;AAEA;AACA,OAAO,SAASE,SAASA,CAACT,GAAY,EAAU;EAC9C,IAAIA,GAAG,KAAK,IAAI,IAAIA,GAAG,KAAKU,SAAS,EAAE,OAAO,EAAE;EAChD,MAAMC,GAAG,GAAGC,MAAM,CAACZ,GAAG,CAAC;EACvB,IAAIW,GAAG,CAACE,QAAQ,CAAC,GAAG,CAAC,IAAIF,GAAG,CAACE,QAAQ,CAAC,GAAG,CAAC,IAAIF,GAAG,CAACE,QAAQ,CAAC,IAAI,CAAC,EAAE;IAChE,OAAO,GAAG,GAAGF,GAAG,CAACT,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG;EAC5C;EACA,OAAOS,GAAG;AACZ;;AAEA;AACA,OAAO,SAASG,YAAYA,CAACC,QAAgB,EAAEC,IAA6B,EAAU;EACpF,OAAOD,QAAQ,CAACb,OAAO,CAAC,0BAA0B,EAAE,CAACe,KAAK,EAAEX,GAAG,KAAK;IAClE,MAAMY,KAAK,GAAIZ,GAAG,CAAYa,KAAK,CAAC,GAAG,CAAC;IACxC,IAAInB,GAAY,GAAGgB,IAAI;IACvB,KAAK,MAAMI,CAAC,IAAIF,KAAK,EAAE;MACrB,IAAIlB,GAAG,KAAK,IAAI,IAAIA,GAAG,KAAKU,SAAS,EAAE,OAAOO,KAAK;MACnDjB,GAAG,GAAIA,GAAG,CAA6BoB,CAAC,CAAC;IAC3C;IACA,OAAOpB,GAAG,KAAK,IAAI,IAAIA,GAAG,KAAKU,SAAS,GAAGE,MAAM,CAACZ,GAAG,CAAC,GAAGiB,KAAK;EAChE,CAAC,CAAC;AACJ;;AAEA;AACA,OAAO,SAASI,eAAeA,CAACC,QAAgB,EAAEC,MAA0B,EAAEP,IAAa,EAA2B;EACpH,MAAMQ,CAAC,GAAGR,IAA+B;EACzC,IAAI;IACF,QAAQM,QAAQ;MACd,KAAK,WAAW;QAAE;UAChB,QAAQC,MAAM;YACZ,KAAK,SAAS;cAAE;gBACd,IAAIE,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,EAAE;kBACpB,MAAMG,GAAG,GAAGH,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;kBACtB,OAAO;oBAAEI,aAAa,EAAED,GAAG,CAACE,YAAY,IAAIF,GAAG,CAACC,aAAa;oBAAEE,YAAY,EAAEH,GAAG,CAACI,WAAW,IAAIJ,GAAG,CAACG,YAAY;oBAAEE,SAAS,EAAEL,GAAG,CAACM,aAAa,IAAIN,GAAG,CAACO,eAAe;oBAAEC,IAAI,EAAEX,CAAC,CAACY;kBAAO,CAAC;gBACzL;gBACA,OAAO;kBAAER,aAAa,EAAEJ,CAAC,CAACK,YAAY,IAAIL,CAAC,CAACI,aAAa;kBAAEE,YAAY,EAAEN,CAAC,CAACO,WAAW,IAAIP,CAAC,CAACM,YAAY;kBAAEE,SAAS,EAAER,CAAC,CAACS,aAAa;kBAAEI,aAAa,EAAEb,CAAC,CAACc,YAAY;kBAAEC,gBAAgB,EAAEf,CAAC,CAACgB;gBAAgB,CAAC;cAC5M;YACA,KAAK,aAAa;cAChB,OAAO;gBAAEC,SAAS,EAAEhB,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG,CAAC;gBAAER,aAAa,EAAEH,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACkB,MAAM,CAAC,CAACC,CAAS,EAAEC,CAAM,KAAKD,CAAC,IAAIC,CAAC,CAACC,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;cAAE,CAAC;YACvJ,KAAK,UAAU;cACb,OAAO;gBAAEV,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;cAAE,CAAC;YAClD,KAAK,aAAa;cAChB,OAAO;gBAAEU,UAAU,EAAEtB,CAAC,CAACsB,UAAU,GAAItB,CAAC,CAACsB,UAAU,CAAWV,MAAM,GAAG,CAAC;gBAAER,aAAa,EAAEJ,CAAC,CAACK,YAAY;gBAAEkB,IAAI,EAAEvB,CAAC,CAACuB;cAAK,CAAC;YACvH,KAAK,eAAe;cAClB,OAAO;gBAAEC,QAAQ,EAAExB,CAAC,CAACwB,QAAQ,GAAIxB,CAAC,CAACwB,QAAQ,CAAWZ,MAAM,GAAG,CAAC;gBAAER,aAAa,EAAEJ,CAAC,CAACK,YAAY;gBAAEoB,WAAW,EAAEzB,CAAC,CAAC0B,UAAU;gBAAEH,IAAI,EAAEvB,CAAC,CAACuB;cAAK,CAAC;YAC5I,KAAK,mBAAmB;cACtB,OAAO;gBAAEI,KAAK,EAAE3B,CAAC,CAAC4B,OAAO,GAAI5B,CAAC,CAAC4B,OAAO,CAAWhB,MAAM,GAAG,CAAC;gBAAEW,IAAI,EAAEvB,CAAC,CAACuB;cAAK,CAAC;YAC7E,KAAK,WAAW;YAChB,KAAK,uBAAuB;cAC1B,OAAO;gBAAEZ,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAIZ,CAAC,CAAC6B,SAAS,GAAI7B,CAAC,CAAC6B,SAAS,CAAWjB,MAAM,GAAG;cAAG,CAAC;YAClG,KAAK,UAAU;YACf,KAAK,sBAAsB;cACzB,OAAO;gBAAED,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;cAAE,CAAC;YAClD,KAAK,wBAAwB;cAC3B,OAAO;gBAAED,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;cAAE,CAAC;YAClD,KAAK,WAAW;YAChB,KAAK,wBAAwB;cAC3B,OAAO;gBAAED,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;cAAE,CAAC;YAClD,KAAK,OAAO;YACZ,KAAK,iBAAiB;cACpB,OAAO;gBAAEN,YAAY,EAAEN,CAAC,CAACO,WAAW;gBAAEuB,SAAS,EAAE9B,CAAC,CAAC+B,QAAQ;gBAAEC,WAAW,EAAEhC,CAAC,CAACiC,UAAU;gBAAEC,cAAc,EAAElC,CAAC,CAACmC;cAAa,CAAC;YAC1H,KAAK,UAAU;YACf,KAAK,sBAAsB;cACzB,OAAO;gBAAExB,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;cAAE,CAAC;YAClD,KAAK,UAAU;YACf,KAAK,sBAAsB;cACzB,OAAO;gBAAEwB,QAAQ,EAAGpC,CAAC,CAACqC,OAAO,EAAUD,QAAQ;gBAAEE,UAAU,EAAGtC,CAAC,CAACqC,OAAO,EAAUE;cAAU,CAAC;YAC9F,KAAK,MAAM;YACX,KAAK,uBAAuB;cAC1B,OAAO;gBAAE5B,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;cAAE,CAAC;YAClD,KAAK,UAAU;cACb,OAAO;gBAAED,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;cAAE,CAAC;YAClD;cACE,OAAO;gBAAED,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;cAAE,CAAC;UACpD;QACF;MACA,KAAK,WAAW;QACd,OAAO;UAAEb,MAAM;UAAEY,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;QAAE,CAAC;MAC1D,KAAK,iBAAiB;QACpB,OAAO;UAAEb,MAAM;UAAEY,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAIZ,CAAC,CAACwB,QAAQ,GAAIxB,CAAC,CAACwB,QAAQ,CAAWZ,MAAM,GAAIZ,CAAC,CAACqC,OAAO,GAAG,CAAC,GAAG;QAAI,CAAC;MAC1H,KAAK,iBAAiB;QACpB,IAAItC,MAAM,KAAK,MAAM,EAAE,OAAO;UAAEyC,KAAK,EAAEvC,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAIZ,CAAC,CAACyC,eAAe,GAAIzC,CAAC,CAACyC,eAAe,CAAW7B,MAAM,GAAG;QAAG,CAAC;QACpI,OAAO;UAAE8B,KAAK,EAAE1C,CAAC,CAAC2C,EAAE;UAAEC,SAAS,EAAE5C,CAAC,CAAC4C,SAAS;UAAEC,MAAM,EAAE7C,CAAC,CAAC6C;QAAO,CAAC;MAClE,KAAK,WAAW;QACd,IAAI9C,MAAM,KAAK,MAAM,EAAE,OAAO;UAAEyC,KAAK,EAAEvC,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;QAAE,CAAC;QACxE,OAAO;UAAEkC,WAAW,EAAE9C,CAAC,CAAC2C,EAAE;UAAEI,eAAe,EAAE/C,CAAC,CAAC+C,eAAe;UAAEF,MAAM,EAAE7C,CAAC,CAAC6C;QAAO,CAAC;MACpF,KAAK,QAAQ;QACX,OAAO;UAAEL,KAAK,EAAEvC,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAIZ,CAAC,CAACgD,MAAM,GAAIhD,CAAC,CAACgD,MAAM,CAAWpC,MAAM,GAAG;QAAG,CAAC;MAC7F,KAAK,WAAW;QACd,OAAO;UAAE4B,KAAK,EAAEvC,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAIZ,CAAC,CAAC6B,SAAS,GAAI7B,CAAC,CAAC6B,SAAS,CAAWjB,MAAM,GAAG;QAAG,CAAC;MACnG,KAAK,UAAU;QACb,IAAIb,MAAM,KAAK,QAAQ,EAAE,OAAO;UAAEuB,UAAU,EAAEtB,CAAC,CAACR,IAAI,GAAIQ,CAAC,CAACR,IAAI,CAAS8B,UAAU,EAAEV,MAAM,IAAI,CAAC,GAAG,CAAC;UAAEqC,cAAc,EAAEjD,CAAC,CAACR,IAAI,GAAIQ,CAAC,CAACR,IAAI,CAAS0D,sBAAsB,GAAGhE;QAAU,CAAC;QACjL,OAAO;UAAEa,MAAM;UAAEyC,KAAK,EAAEvC,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAIZ,CAAC,CAACwC,KAAK,KAAKxC,CAAC,CAACwB,QAAQ,GAAIxB,CAAC,CAACwB,QAAQ,CAAWZ,MAAM,GAAIZ,CAAC,CAAC2C,EAAE,GAAG,CAAC,GAAG,CAAE;QAAG,CAAC;MACnI,KAAK,OAAO;QAAE;UACZ,IAAI5C,MAAM,KAAK,MAAM,IAAIA,MAAM,KAAK,QAAQ,EAAE,OAAO;YAAEyC,KAAK,EAAExC,CAAC,CAACwC,KAAK;YAAEW,KAAK,EAAEnD,CAAC,CAACmD;UAAM,CAAC;UACvF,IAAIpD,MAAM,KAAK,WAAW,EAAE,OAAO;YAAEqD,WAAW,EAAEpD,CAAC,CAACoD,WAAW;YAAEC,YAAY,EAAErD,CAAC,CAACqD,YAAY;YAAEC,UAAU,EAAEtD,CAAC,CAACuD;UAAiB,CAAC;UAC/H,IAAIxD,MAAM,KAAK,QAAQ,EAAE,OAAO;YAAEyD,QAAQ,EAAExD,CAAC,CAACwD,QAAQ;YAAEC,SAAS,EAAEzD,CAAC,CAACyD;UAAU,CAAC;UAChF,IAAI1D,MAAM,KAAK,aAAa,EAAE,OAAO;YAAE2D,cAAc,EAAE1D,CAAC,CAAC0D,cAAc;YAAEC,YAAY,EAAE3D,CAAC,CAAC2D;UAAa,CAAC;UACvG,IAAI5D,MAAM,KAAK,aAAa,EAAE,OAAO;YAAE6D,aAAa,EAAE5D,CAAC,CAAC4D,aAAa;YAAED,YAAY,EAAE3D,CAAC,CAAC2D;UAAa,CAAC;UACrG,IAAI5D,MAAM,KAAK,OAAO,EAAE,OAAO;YAAE8D,eAAe,EAAE7D,CAAC,CAAC6D;UAAgB,CAAC;UACrE,OAAO;YAAE9D;UAAO,CAAC;QACnB;MACA,KAAK,aAAa;QAChB,OAAO;UAAEyC,KAAK,EAAExC,CAAC,CAACwC,KAAK;UAAEjB,IAAI,EAAEvB,CAAC,CAACuB,IAAI;UAAEuC,OAAO,EAAE9D,CAAC,CAACqC,OAAO,GAAG0B,MAAM,CAACC,IAAI,CAAChE,CAAC,CAACqC,OAAiB,CAAC,CAACzB,MAAM,GAAG;QAAE,CAAC;MAC3G,KAAK,WAAW;QACd,OAAO;UAAEb,MAAM;UAAEyC,KAAK,EAAExC,CAAC,CAACwC,KAAK,KAAKvC,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG,CAAC;QAAE,CAAC;MACxE,KAAK,QAAQ;QACX,OAAO;UAAEuC,KAAK,EAAEnD,CAAC,CAACmD;QAAM,CAAC;MAC3B;QACE,OAAO;UAAExC,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;QAAE,CAAC;IACpD;EACF,CAAC,CAAC,MAAM;IACN,OAAO;MAAED,IAAI,EAAEV,KAAK,CAACC,OAAO,CAACF,CAAC,CAAC,GAAGA,CAAC,CAACY,MAAM,GAAG;IAAE,CAAC;EAClD;AACF;;AAEA;AACA;AACA;AACA,OAAO,SAASqD,WAAWA,CACzBC,gBAAoE,EACpEC,EAAU,EACVC,IAAY,EACA;EACZ,MAAMC,UAAU,GAAG,IAAIC,eAAe,CAAC,CAAC;EACxC,MAAMC,OAAO,GAAG,OAAOL,gBAAgB,KAAK,UAAU,GAClDA,gBAAgB,CAACG,UAAU,CAACG,MAAM,CAAC,GACnCN,gBAAgB;EAEpB,IAAIO,KAAoC;EACxC,MAAMC,cAAc,GAAG,IAAIC,OAAO,CAAQ,CAACC,CAAC,EAAEC,MAAM,KAAK;IACvDJ,KAAK,GAAGK,UAAU,CAAC,MAAM;MACvBT,UAAU,CAACU,KAAK,CAAC,CAAC;MAClBF,MAAM,CAAC,IAAIG,KAAK,CAAC,QAAQZ,IAAI,oBAAoBD,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC,EAAEA,EAAE,CAAC;EACR,CAAC,CAAC;EAEF,OAAOQ,OAAO,CAACM,IAAI,CAAC,CAACV,OAAO,EAAEG,cAAc,CAAC,CAAC,CAACQ,OAAO,CAAC,MAAMC,YAAY,CAACV,KAAK,CAAC,CAAC;AACnF","ignoreList":[]}

package/dist/server/local-agent-gateway.d.ts

@@ -1,12 +1,12 @@
 /**
  * Local Agent Gateway — WebSocket server for local agent connections.
  *
- * Accepts outbound WebSocket connections from user machines running swag-agent.
+ * Accepts outbound WebSocket connections from user machines running whale agent.
  * Authenticates per-store via API key, maintains connection pool, routes commands.
  *
  * Architecture:
  *   Claude Code → MCP stdio → Fly.io server → local_agent handler
- *     → this gateway → WebSocket → user's local swag-agent → execute locally
+ *     → this gateway → WebSocket → user's local whale agent → execute locally
  *
  * Same pattern as kali.ts but routes through WebSocket instead of HTTP to Fly.io internal.
  */